~ubuntu-branches/ubuntu/precise/hardening-wrapper/precise-security : changes

~ubuntu-branches/ubuntu/precise/hardening-wrapper/precise-security » Changes from revision 30

From Revision 30 to 11

Rev	Summary	Authors	Tags	Date
30	hardened-cc: don't set -Wformat options if they are already ... hardened-cc: don't set -Wformat options if they are already set (LP: #1347257)	Chris Coulson	1.36ubuntu1.1	8 years ago
29	Make bash-completion Multi-Arch: foreign, so that it can sat... Make bash-completion Multi-Arch: foreign, so that it can satisfy cross-build-dependencies.	Colin Watson	1.36ubuntu1	12 years ago
28	hardening-check: fix function-finder to accept IFUNC too, im... hardening-check: fix function-finder to accept IFUNC too, improve reporting slightly, improve manpage to explain false alarms.	Kees Cook	1.36	12 years ago
27	* debian/control: switch to "optional" priority so lintian c... * debian/control: switch to "optional" priority so lintian can depend on hardening-includes. * hardening-check: rewrite in Perl, add "--lintian" mode, to support fixing bug 650536.	Kees Cook	1.35	12 years ago
26	* debian/control: update VCS tags for bzr. * debian/control: update VCS tags for bzr. * hardening{-check,.make}: correct documentation from -O2 to -O1. * hardened-{cc,ld}, hardening.make, debian/rules: use DEB_HOST_ARCH instead of of DEB_HOST_ARCH_CPU for behavioral defaults (Closes: 635642).	Kees Cook	1.34	12 years ago
25	* debian/control: * debian/control: - bump to standards 3.9.2; no changes needed - hardening-wrapper: mark as Multi-Arch: foreign for build sanity. * debian/source/format: mark as 3.0 native.	Kees Cook	1.33	12 years ago
24	* debian/rules, debian/hardening-wrapper.{prerm,preinst,post... * debian/rules, debian/hardening-wrapper.{prerm,preinst,postinst}: remove gcc-4.1 diversions since it has been removed from unstable. * hardened-cc, hardening.make: add "-Werror=format-security" by default (Closes: #587358). * tests/Makefile.common, tests/format.c: add test for newly added "-Werror=format-security" default option. * hardened-cc, hardening.make: add "--param ssp-buffer-size=4" by default to catch smaller character arrays. * tests/Makefile.common, tests/ssp-buffer-size-{protect,skip}.c: add tests for newly added "--param ssp-buffer-size=4" default. * debian/README.Debian: updated to include newly added options. * hardened-cc: disable -fstack-protector when -ffreestanding used. * hardening.make: provide examples for working around build-time collisions between "-fPIE" and "-fPIC" (Closes: #596150).	Kees Cook	1.32	13 years ago
23	* tests/Makefile.common: do not require @@GLIBC suffix for n... * tests/Makefile.common: do not require @@GLIBC suffix for nm tests. * tests/Makefile.wrapper: include symlink for ld.gold testing. * hardening-check: improve hardening-check to parse BIND_NOW also from the FLAGS dynamic section.	Kees Cook	1.31	13 years ago
22	* debian/README.Debian: update for gcc versions, include min... * debian/README.Debian: update for gcc versions, include minimal notes on hardening-includes (Closes: 592847, 592846). * debian/rules, debian/hardening-wrapper.{prerm,postinst}: add gcc-4.6 to the diversion list. * debian/control: remove binutils-multiarch conflict now that ld.bfd is no longer diverted.	Kees Cook	1.30	13 years ago
21	* debian/control: add Conflicts for binutils-multiarch (Clos... * debian/control: add Conflicts for binutils-multiarch (Closes: 579409, LP: #596136). * debian/hardening-wrapper.postrm: remove attempted diversions on installation failure.	Kees Cook	1.29	13 years ago
20	hardening.make: enable PIE on hurd (Closes: 586215), thanks ... hardening.make: enable PIE on hurd (Closes: 586215), thanks to Samuel Thibault.	Kees Cook	1.28	13 years ago
19	* hardening.make: * hardening.make: - disable RELRO on avr32. - clarify use of CXXFLAGS. * hardening-check: fix regex to correctly call sed (Closes: 578488).	Kees Cook	1.27	14 years ago
18	* debian/control: * debian/control: - bump standards version: no changes needed. - should not be considered "experimental". * hardening-check: use readelf's "-s" instead of "-r" to avoid issues with archs that lack sane relocations. * tests/Makefile.common: - adjust tests to include -s output. - weaken nm symbol matching.	Kees Cook	1.25	14 years ago
17	* hardening-check: handle alternate names for relocation jum... * hardening-check: handle alternate names for relocation jump slots (Closes: 568622) * tests/Makefile.common: show relocations as well for future debugging.	Kees Cook	1.24	14 years ago
16	* hardening.make: correctly document how to disable PIE on a... * hardening.make: correctly document how to disable PIE on a per-target basis (Closes: 567707). * tests/Makefile.{common,includes}: add HARDENING_DISABLE_* flags tests.	Kees Cook	1.23	14 years ago
15	debian/hardening-wrapper.postrm: fix typo in diversion name debian/hardening-wrapper.postrm: fix typo in diversion name (Closes: 564840).	Kees Cook	1.22	14 years ago
14	* debian/control: add ${misc:Depends} to control file entrie... * debian/control: add ${misc:Depends} to control file entries to keep lintian happy. * hardening-check: add -q option to only report failures. * really handle gcc 4.5 diversion (Closes: 564596). * handle ld diversion when binutils-gold installed (Closes: 535037).	Kees Cook	1.21	14 years ago
13	* hardening.make: * hardening.make: - switch to "filter" for easier to read logic. - allow PIE for arm/armel, since it's only the kernel that lacks ASLR. * tests/Makefile: perform test builds with -fstack-protector and -fPIE -pie on all architectures just to have a record of the success/failure in the build logs, even if we are manually selecting the defaults.	Kees Cook	1.20	14 years ago
12	Add Conflicts on binutils-gold, which also uses diversions a... Add Conflicts on binutils-gold, which also uses diversions against gcc and friends (Closes: 535037, LP: #442636).	Kees Cook	1.17	14 years ago
11	tests/Makefile: exclude relro test on hppa. tests/Makefile: exclude relro test on hppa.	Kees Cook	1.16	14 years ago

Older »